Detections
Analytics
CVE-2026-64878
high
Description
Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components (apache, OpenSSL, postgreSQL, PHP, redis) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these libraries to address the potential impact of the issues. Security Center Patch SC202607.1 updates the following components:postgresql to version 16.14Apache to version 2.4.67OpenSSL to version 3.5.4PHP to version 8.2.31redis to version 8.2.6 (6.7.x and 6.8.0 only)Additionally, several vulnerabilities were reported to Tenable and addressed within this patch. Please see the full list of resolved issues below.ComponentCVE IDSeverityCVSS v3 CVSS v3 Temporal CVSS v3 VectorSecurity Center - SQL InjectionCVE-2026-64877Critical9.69.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:U/RC:CSecurity Center - Command InjectionCVE-2026-64878Critical9.09.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:ND/RL:ND/RC:CSecurity Center - Command InjectionCVE-2026-64879Critical9.09.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:ND/RL:ND/RC:CSecurity Center - Blind SQL InjectionCVE-2026-64880High7.17.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:ND/RL:ND/RC:CSecurity Center - Improper File ValidationCVE-2026-64881High8.88.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:ND/RL:ND/RC:CApache HTTP ServerCVE-2026-23918High8.87.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HApache HTTP ServerCVE-2026-24072High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HApache HTTP ServerCVE-2026-33523Medium6.55.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NApache HTTP ServerCVE-2026-33857Medium5.34.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NApache HTTP ServerCVE-2026-34032Medium5.34.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NApache HTTP ServerCVE-2026-34059High7.56.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NOpenSSLCVE-2025-11187Medium6.15.1CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:HOpenSSLCVE-2025-15467High8.16.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HOpenSSLCVE-2025-15468Medium5.94.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HOpenSSLCVE-2025-15469Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NOpenSSLCVE-2025-66199Medium5.94.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HOpenSSLCVE-2025-68160Medium4.74.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HOpenSSLCVE-2025-69418Medium43.4CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NOpenSSLCVE-2025-69419High7.46.2CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NOpenSSLCVE-2025-69420High7.56.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOpenSSLCVE-2025-69421High7.56.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOpenSSLCVE-2026-22795Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HOpenSSLCVE-2026-22796Medium5.34.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LPHPCVE-2026-7568Low3.32.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NPHPCVE-2026-7263Low3.32.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NPHPCVE-2026-7259Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-7262Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-7258Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-6104Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-42371Medium5.54.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-6735Medium6.15.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NPHPCVE-2025-14179Medium6.55.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NPHPCVE-2026-7261Medium6.55.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HPHPCVE-2026-6722High8.16.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-2003Medium4.33.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NPostgreSQLCVE-2026-2004High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-2005High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-2006High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-6472Medium5.44.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NPostgreSQLCVE-2026-6473High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-6474Medium4.33.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NPostgreSQLCVE-2026-6475High8.87.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-6477High8.87.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-6478Medium6.55.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NPostgreSQLCVE-2026-6479High7.56.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HPostgreSQLCVE-2026-6637High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPostgreSQLCVE-2026-6638Low3.73.1CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:NRedisCVE-2026-23479High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HRedisCVE-2026-25243High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HRedisCVE-2026-23631High8.16.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HRedisCVE-2026-25588High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HRedisCVE-2026-25589High8.87.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tenable has released Security Center Patch SC202607.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/security-center